WP User Manager vulnerabilities
11 published CVEs name WP User Manager among the affected products.
- 11Published CVEs11 of them scored
- 9Last 12 monthspublished in the last year
- 2Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-124413
WordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerability
WP User Manager · WP User Manager
Medium5.3 - CVE-2026-121575
WordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerability
WP User Manager · WP User Manager
Medium5.3 - CVE-2026-116846
WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerability
WP User Manager · WP User Manager
Medium5.3 - CVE-2026-112823
WordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerability
WP User Manager · WP User Manager
Medium4.3 - CVE-2026-108496
WordPress WP User Manager plugin <= 2.9.24 - Broken Access Control vulnerability
WP User Manager · WP User Manager
Medium5.3 - CVE-2026-107423
WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability
WP User Manager · WP User Manager
Medium4.3 - CVE-2026-103085
WordPress WP User Manager plugin <= 2.9.20 - Privilege Escalation vulnerability
WP User Manager · WP User Manager
Medium6.5 - CVE-2026-94079
WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability
WP User Manager · WP User Manager
Medium5.3 - CVE-2026-49766
WordPress WP User Manager plugin <= 2.9.16 - Arbitrary File Deletion vulnerability
WP User Manager · WP User Manager
Critical9.9 - CVE-2025-60245
WordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerability
WP User Manager · WP User Manager
Critical9.8